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1 Introduction 

Over the years, the preemptive periodic constrained-deadHne task model ||9l has proven remarkably useful for the 
modeling of recurring processes that occur in hard real-time computer application systems, where the failure to satisfy 
any constraint may have disastrous consequences. The problem of scheduling such tasks upon a single processor 
(CPU) so that all the deadlines are met has been widely studied in the literature and is now well understood. The 
most important point in this direction being that an optimal online scheduler, commonly known as Earliest Deadline 
First (EDF), has been derived. EDF is a priority-based scheduler which assigns priorities to jobs so that the shorter 
the absolute deadline of a job the higher its priority. This scheduler is optimal with the interpretation that if a periodic 
constrained-deadline task system can be successfully scheduled with another scheduler upon a single CPU, then it 
can also be successfully scheduled using EDF. However, a very large number of applications nowadays turns out to 
be executed upon more than one CPU for practical and economic reasons due to the advent of multicore technologies. 
For such applications, even though EDF is no longer optimal |[8|, much recent work gave rise to multiple investigations 
and thus many alternative algorithms based on this scheduling policy have been developed due to its optimaUty upon 
uniprocessor platforms lfT3l . Most results have been derived under either global or partitioned scheduling techniques. 
In global scheduling ||4|, all the tasks are stored in a single priority-ordered queue and the global scheduler selects for 
execution the highest priority tasks from this queue. In this framework, tasks are allowed to migrate at runtime from 
one CPU to another in order to complete their executions |6 3|. In partitioned scheduling ||2l, all the tasks are first 
assigned statically to the CPUs, then each CPU uses independently its local scheduler at runtime. Despite these two 
scheduling techniques are incomparable lH] in the sense that there are systems which are schedulable with partitioning 
and not by global and conversely, and despite the high number of interesting results that have already been derived up 
to now, many open questions still remain to be answered, especially when global schedulers are considered. Regarding 
this kind of schedulers, an important issue consists in deriving an exact schedulability test by exploiting on the one 
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hand the predictabihty property of the scheduler and by providing on the other hand a feasibility interval so that if it is 
possible to find a valid schedule for all jobs contained in this interval, then the whole system will be stamped feasible. 

Related work. In recent years, as most global schedulers are predictible, extensive efforts have been performed 
towards addressing the problem of determining a feasibility interval for the global scheduling of periodic constrained- 
deadline tasks upon multiprocessor platforms. That is, to derive an interval of time so that if it is possible to find a valid 
schedule for all jobs contained in this interval, then the whole system is feasible. Up to now, sound results have been 
obtained only in the particular case where tasks are scheduled by using an Fixed-Task-Priority (FTP) scheduler EITJ. 
Being an FTP scheduler one where all the jobs belonging to a task are assigned the same priority as the priority 
assigned to the task beforehand (i.e., at design time). We are not currently aware of any existing result concerning the 
feasibility interval for Fixed-Job-Priority (FJP) schedulers in the literature, except the one proposed by Leung in lfT2l . 
However, we show that this result is actually wrong. An FJP scheduler is one where two jobs belonging to the same 
task may be assigned different priorities. 

This research. In this paper, we derive a feasibility interval for an FJP scheduler, namely global-EDF. To the best 
of our knowledge, this will be the first valuable feasibility interval for FJP schedulers since the one proposed by Leung 
in lfT2ll is flawed. Based on this feasibility interval and considering the predictability property of this scheduler, our 
main contribution is therefore an exact schedulability test for the global-EDF scheduling of periodic hard real-time 
tasks upon identical multiprocessor platforms. 

Paper organization. The remainder of this paper is structured as follows. Section |2] presents the system model 
and the scheduler that are used throughout the paper. Section |3]provides the reader with some useful definitions and 
properties. Section|4]presents our main contribution. Finally, Section |5]concludes the paper. 

2 System model 

Throughout this paper, all timing characteristics in our model are assumed to be non-negative integers, i.e., they are 
multiples of some elementary time interval (for example the CPU tick, the smallest indivisible CPU time unit). 

2.1 Task specifications 

We consider the preemptive scheduling of a hard real-time system t =^ {ti , r2 , . . . , r„ } composed of n tasks upon m 
identical CPUs according to the following interpretations. 

> Preemptive scheduling: an executing task may be interrupted at any instant in time and have its execution 
resumed later. 
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i> Identical CPUs: all the CPUs have the same computing capacities. 

Each task is a periodic constrained-deadline task characterized by four parameters {Oi,Ci, Di,Ti) where Oi 
is the first release time (offset), Ci is the Worst Case Execution Time (WCET), Di < Ti is the relative deadline and 
Ti is the period, i.e., the exact inter-arrival time between two consecutive releases of task t^. These parameters are 
given with the interpretation that task generates an infinite number of successive jobs Ti j from time instant Oi, with 
execution requirement of at most Ci each, the j^^ job which is released at time Oij Oi + (j — 1) ■ Ti must 
complete within [Oi,j,di_j) where di_j Oi,j + Di, the absolute deadline of job Ti,j. 

We assume without any loss of generality that Oi > 0, Vi G {1, 2, . . . , n} and we denote by Omax the maximal 
value among all task offsets, i.e., Omax '= maxjOi, O2, • • • , We denote by P the hyperperiod of the system, 
i.e., the least common multiple (1cm) of all tasks periods: P =' lcm{Ti, T2, . . . , T„}. Also, we denote by the 
sum of the WCETs of all tasks in r: Cr =' Er=i '^i- 

Job Ti j is said to be active at time t if and only if Oi j < t and Ti j is not completed yet. More precisely, an active 
job is said to be running at time t if it has been allocated to a CPU and is being executed. Otherwise, the active job is 
said to be ready and is in the ready queue of the operating system. 

We assume that all the tasks are independent, i.e., there is no communication, no precedence constraint and no 
shared resource (except for the CPUs) between tasks. Also, we assume that any job cannot be executed in 
parallel, i.e., no job can execute upon more than one CPU at any instant in time. 

2.2 Scheduler specifications 

We consider that tasks are scheduled by using the Fixed- Job-Priority (FJP) scheduler global-EDF. That is, the 
following two properties are always satisfied: (i) the shorter the absolute deadline of a job the higher its priority and 
(ii) a job may begin execution on any CPU and a preempted job may resume execution on the same CPU as, or 
a different CPU from, the one it had been executing on prior to preemption. We assume in this research that the 
preemptions and migrations of all tasks and jobs in the system are allowed at no cost or penalty. 

3 Definitions and properties 

In this section we provide definitions and properties that will help us establishing our exact schedulability test. First, 
we formalize the notions of synchronous and asynchronous systems, schedule and valid schedule, and configuration. 

Deiuiition 1 ((A)Synchronous systems). A task system r = {ti,T2, . . . ,t„} is said to be synchronous if each task 
in T has its first job released at the same time-instant c, i.e., Oi = cfor all 1 < i < n. Otherwise, r is said to be 
asynchronous. 
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Definition 2 (Schedule (T[t)). For any task system r — {ti, T2, . . . , t„} and any set of m identical CPUs {tti, 7r2, . . . , TTm}, 
the schedule a{t) of system t at time-instant t is defined as (t:N— >{1;2,..., n}™ where a(t) (ai{t), cr2(i), . . . , (Tm(t)) 



Definition 3 (Valid schedule). A schedule a of a task system t — {ri, T2, . . . , t„} /i said to be valid if and only if no 
task in r ever misses a deadline when tasks are released at their specified released times. 

Definition 4 (Configuration Cs{t, t)). Let S be the schedule of a task system t. We define the configuration of the 
schedule S at time t, denoted by Cs{t, t), to be the n-tuple (ei_t, 62,4, • . . , e„^f ), where Ci^t is the amount of time for 
which task Ti has executed since its last release time up until time t, and Ci^t is undefined ift< Oi. In the latter case, 
Cs{t, t) is undefined. 

Following Definition [4] the configuration Cs{t, t) at time i of a schedule S is defined if and only if i > Omax- 
Moreover, we have < Cj t < Vi > 0. Now let t > Omax and t' > Omax be two time instants such that t 7^ t', 
we denote by Cs{T,t) ^ Cs{T,t') the fact that e^.f > ei,t',Vl < i < n. 

From now on, we always assume an implementation of global-EDF which is deterministic, work-conserving and 
request-dependent ||6l according to the following definitions. 

Definition 5 (Deterministic schedulers). A scheduler is said to be deterministic ;/ and only if it generates a unique 
schedule for any given set of jobs. 

Definition 6 (Work-conserving schedulers). A scheduler is said to be work-conserving if and only if it never idles a 
CPU while there is at least one active ready task. 

Definition 7 (Request-dependent schedulers). A scheduler is said to be request-dependent if and only if for any two 

tasks Ti, Tj € r and any two jobs Ti j,, Tj £ such that Ti ^. is assigned a higher priority than Tj i, then we also have that 
Tik+P/Ti is assigned a higher priority than Tj^^p/j^.. 

Informally speaking. Definition |7] requires that the very same total order is used each hyperperiod between the 
"corresponding" jobs in terms of priorities. 

The deterministic and request-dependent requirements are mandatory to ensure a periodic schedule and these 
requirements impact, eventually, on the global-EDF tie-breaker, i.e., the tie-breaker must be deterministic and request- 
dependent. 

Some further definitions. 

Definition 8 (^-feasibility). A periodic constrained-deadline task system r is said to be ^-schedulable upon a set of 
m identical CPUi if all the tasks in t meet all their deadlines when scheduled using scheduler A, i.e., scheduler A 
produces a valid schedule. 




0, if there is no task scheduled on ttj at time-instant t 
z, if task Ti is scheduled on TTj at time-instant t. 
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Definition 9 (Predictability). A scheduler A is said to be predictable if the A-feasibility of a set of tasks implies the 
A-feasibility of another set of tasks with identical release times and deadlines, but smaller execution requirements. 

Before we present the main result of this paper, we need to introduce the following notations and results taken 
from |[TOl and JU. 

Lemma 1 (Ha and Liu BlOl ). Any work-conserving and FJP scheduler is predictable upon identical multiprocessor 
platforms. 

Thanks to Lemma [T| we are guaranteed that the global-EDF scheduler is predictable. Indeed, global-EDF is a 
work-conserving and FJP scheduler Thereby, given a periodic constrained-deadline task system t, we can always 
assume an instance of t in which all jobs execute for thek whole WCETs. This leads us to consider hereafter a system 
having known jobs release times, deadlines and execution times. If 5™'^'^' is the valid schedule obtained with these 
parameters by using the global-EDF scheduler, then we are guaranteed to successfully schedule every other possible 
instance of t in which jobs can execute for less than their WCETs by using the same global-EDF scheduler. 

Lemma 2 (Cucu and Goossens ||6l|). Let S be the schedule of a periodic constrained-deadline task system r con- 
structed by using the global-EDF scheduler If the deadlines of all task computations are met, then S is periodic /ram 
sotne point with a period equal to P. 

Lemma 3 (Inspired from Cucu and Goossens Q). Let S be the schedule of a periodic constrained-deadline task 
system r constructed by using the global-EDF scheduler Then, for each task Ti and for each time instant ti > Oi, 

dcf 

we have Ci^n ^ Cj,t2> where t2 = + P. 

Proof. The proof is made by contradiction. We assume there is some task Tj^ and some time instant ti > Oj^ such 
that tj^.ti < eji.t^, where t2 = + P- Then there must be some time instant t[ < ti such that Tj^ is active at both t'^ 
and t'2 — t'^ + P, and tj-^ is scheduled at ^2 while is not at t[. This can only occur is there is another task Tj^, which 
is active (running) at t'l but not at <2- But this implies that e^^ < e^^ j^. Thus, we may repeat the above argument 
to produce an infinite progression of tasks Tj^, Tj^, . . . , for which no lower bound will exist for the time at which the 
tasks in the sequence are active. But this is impossible, since every task Ti in r has an initial release time Oi and the 
time is discrete in our model of computation. The lemma follows. □ 

Note that for any task t,; S t and for any time instant t > Omax, Cs (''', t) is monotonically decreasing relative to 
t with period P thanks to Lemma[3j i.e., C5 (r, i fc • P) ^ C5 (r, i + (fc + 1) • P) VA; e N 

4 Exact schedulability test 

In this section we provide an exact schedulability test for the global-EDF scheduling of periodic hard real-time tasks 
upon identical multiprocessor platforms. It is worth noticing that we assume in this section that each job of the same 
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task (say has an execution requirement which is exactly Ci time units thanks to the predictability property of this 
scheduler Based on the later result, the intuitive idea behind our approach is to construct a schedule by using an 
implementation of global-EDF which follows hypothesis described in Section[3] then check to see if the deadlines of 
all task computations are met. However, for this method to work we need to establish an "a priori" time interval within 
which we need to construct the schedule. If the task system r is synchronous, then such a time interval is known: 
[0, P) where P = IcmlTi, T2, . . . , r„} see |6| for details. Unfortunately, if the task system r is asynchronous, such 
a time interval is unknown, in the following we will fill the gap. 

As the task system r is composed of periodic tasks, the idea thereby consists in simulating the system until the 
schedule becomes periodic, i.e., the steady phase representing the general timely behavior of the system from a certain 
time instant is reached. This steady phase is reached when two configurations separated by P time units are identical. 

Before going any further in this paper, it is worth noticing the following interesting observations. 

Observation 1. By extending the results obtained in the uniprocessor framework to the multiprocessor platforms, 
Leung claimed in lfT2l that an exact feasibility condition for global-EDF consists in checking if (i) every deadline is 
met until time Omax + 2P and (ii) the configurations at instants Omax + P and Omax + 2P are identical. Anyway, 
this is flaw, since there are schedulable task systems that reach their steady phase later than Omax + 2P, as shown by 
Counterexample [T] taken from [SJ. 

Counterexample 1 (Braun and Cucu (5]). Consider the following periodic task system: ti = (Oi = 0, Ci = 

2, D2=T2 = 3), T2 = (O2 = 4, C2 = 3, D2 =T2 = 4:),T3 = {O3 = 1, C3 = 3, D3 = T3 ^ 6) to be scheduled with 
global-EDF upon to = 2 CPUs. 

By building the schedule (see Figure^, it is possible to see that at time OYaa.ii+P = 4+12 = 16 ant/ Omax + 2P = 
4 + 2 • 12 = 28 the steady phase has not yet been reached (at times 17 and 29 there are two different configurations). 
However, the steady phase is reached after a further hyperperiod. Since no deadline is missed, the task system is 
schedulable with global-EDF. 

The flaws in the results proposed by Leung in lfT2l come from many sources. The paper was actually centered on 
the Least Laxity First (LLF) scheduler defined as follows. 

Definition 10 (LLF scheduler). The LLF scheduler always executes the jobs with least laxity; being the laxity of a 
job its absolute deadline minus the sum of its remaining processing time and the current time. 

> Flaw 1. The first flaw is about the comparison between the LLF scheduler and the global-EDF scheduler. In- 
deed it was claimed in lfT2l that every instance of jobs schedulable by global-EDF upon to CPUs is also schedulable 
by LLF upon to CPUs. This flaw, presented as one of the main results of the paper, has been pointed out by Kalyana- 
sundaram et al. in ifTTl . 
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Figure 1: [0, Omax + 2P] is not a feasibility interval for the global-EDF scheduler. 



i> Flaw 2. The second flaw lies in the proof of Lemma 2 of Leung's paper replicated here (except we consider 
global-EDF). 

Lemma 4 (Lemma 2, pages 216-217 of il2f ). Let S be the schedule of a task system r constructed by using the 
global-EDF scheduler upon m > 1 CPUs. Ifr is schedulable by using the global-EDF scheduler on m CPUs, then 
Cs{t, ti) = Cs{t, t2) where ti =^ Omax + P and t2 =^ <i + P. 

The argument stating that: 

the m CPUs are always busy in the interval [^1,^2] 

is incorrect; this is a uniprocessor argument not valid in a multiprocessor context. Indeed, considering Conterexam- 
ple[T| it is not difficult to see in Figure[r|that ti = 16, t2 = 28 and Cs{t, 16) 7^ Cs{t^ 28). However, in the time-slots 
[17, 18) and [23, 24), only one CPU (here, CPU tti) out of two is actually busy by the execution of the jobs. 

Observation 2. Although we address the global-EDF scheduling problem of periodic constrained-deadline task 
systems. Counterexample |2] give evidence of possibly late occurrence of the steady phase in the valid schedule 5 of a 
task system r. Indeed, it shows that the steady phase can be reached after a time-instant as large as Omax -I- 42 • P. 

Counterexample 2. Consider the following periodic task system: ti = (Oi = 225, Ci — 90, D2 = T2 = 161), T2 = 

(O2 - 115,02 = 40,i?2 =T2 ^ 161), T3 = (O3 = 0,03 = 72, A3 - T3 - 161), r4 - (O4 = 129, 04 = 

120, D4 = T4 = 161) to be scheduled with global-EDF upon m = 2 CPUs. 

By building the schedule using an open source simulation tool such as STOI{.y^(we implemented a deterministic 

and re que St- dependent EDF tie-breaker), it is possible to see that at time-instants Omax + 42P = 6987 and Omax + 

43P = 7148 the steady phase has not been reached yet ( there are two different configurations at time-instants 6988 

' STORM stands for "Simulation Tool for Real-time Multiprocessor Scheduling Evaluation" and is a simulation tool developed at Irccyn, Ecole 
Centrale de Nantes, France. 
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and 7149 j. However, the steady phase is reached after a further hyperperiod. Again, since no deadline is missed, the 
task system is schedulable with global-EDF. 

It thus follows from Lemma |2] Observation 1 and Observation 2 the conjecture that integer k e N+ in Expres- 
sion (Omax + k ■ P) for the time-instant to reach the steady phase must be a function of tasks parameters. 

Lemma 5. Let S be the valid schedule of an asynchronous periodic constrained-deadline task system t. We assume 
that S has been constructed by using the global-EDF scheduler Then an upper bound on the time-instant up to which 
there exists t > such that Cs{t, t — P) = Cs{t, t) is given by <up =^ Omax + {Ct + 1) ■ P 

Proof. Let S be the valid schedule of an asynchronous periodic constrained-deadline task system r, constructed by 
using the global-EDF scheduler. By definition, 0,nax is the first time-instant at which all tasks in t are released, the 
steady state cannot start before that time-instant. Now we will upper-bound the first time-instant where the schedule 
starts to repeat. The worst-case scenario is the one where there is a different system configuration, between two 
successive hyperperiods, a maximal number of times starting from Omax- I-e-; ^i,Ora^^ = Vi and Cs{t, Omax + 
k-P) ^ 05(T,0max + (fc+l)-/') Vfc e [0,fc] andC'5(T,Omax+fc-P) = C5 (t, Omax+ (fc+ 1) ' P)- By Lemmagaud 
the fact that time is discrete in our model of computation, the worst-case scenario — i.e., the scenario which maximizes 
k — corresponds to the case where each time the system configuration differs from the previous one in the following 
way: 3£ e [l,n] such that: ej^o„,,x+(fe+i)-P = (^i,o„,^^+k-p Vi 7^ ^ and e£^o„„,+(fc+i)-p = e<>,o,„ax+fc-P " 1- Since 
< Ci^t < Ci an upper-bound for k is X^iLi Oj. And by Lemma [2] at time iup = Omax + (X]r=i O; + 1) • P = 
Omax + (Or + 1) • P wc havc O5 (t, <up ^ P) = Cs{t, ^up) and the schedule is periodic with a period of P. □ 

Now we have the material to define an "exact" schedulability test for the global-EDF scheduling of periodic hard 
real-time tasks upon identical multiprocessor platforms. 

Exact Schedulability Test. Let r be an asynchronous periodic constrained-deadline task system. Let tt be a platform 
consisting of m identical CPUs. We assume that r is scheduled upon tt by using the global-EDF scheduler. Then 
r is schedulable if and only if (i) all deadlines are met in [0, tup) and (ii) Cs{t, t^p — P) = CsiT, tup) where tup is 
defined in Lemma |5j 

Proof. If there is a deadline miss in [0, tup), then the system is clearly not schedulable. Otherwise, this schedulability 
test is a direct consequence of Lemma |5] Lemma |2] (the periodicity property of the schedule) and Lemma [T] (the 
predictabihty property of the global-EDF scheduler). □ 

5 Conclusion 

In this paper, we considered the scheduling problem of hard real-time systems composed of periodic constrained- 
deadline tasks upon identical multiprocessor platforms. We assumed that tasks were scheduled by using the global-EDF 
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scheduler and we provided an exact schedulability test for this scheduler Also, we showed by means of a counterex- 
ample that the feasibihty interval, and thus the schedulability test, proposed by Leung |[T2l is incorrect and we showed 
which arguments are actually incorrect. 
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